Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in this 
a pplication: 

Listing of claims: 

Claims 1-25 (Canceled) 

26. (Currently Amended) A method of controlling a network contro l, said network 
comprising: 

a first set of two or more network elements and a second set of one or more 
network elements: two or more of said first elements and one or more of said 
second elements having an end point element of said network which hosts an 
agent: and 

a policy controller: said method comprising: 

collecting real-time op e ration operational information relating to attribute 
values at two e n-ene or more agents from said first set of two or more network 
elements of a network which host agents: 

receiving said real-time operational information relating to said attribute 
values at said policy controller from said two or more agents from said first set: 

selecting a policy, without human intervention, based on said real time 
information relating to said attribute values in said policy controller to be 
implemented by at least one of said second network e lement elements hosting an 
agent, differ e nt from th e first n e twork e l e m e nt, responsive to the collected real 
time information from said policy controller th e on e or mor e first n e twork e l e m e nts, 
th e at l e ast on e s e cond e l e m e nt including an e nd point e l e m e nt of th e n e twork and 
hosting an ag e nt, and e nforcing th e s e l e ct e d policy on th e ag e nt host e d by th e at 
l e a s t on e s e cond n e twork e l e m e nt ; and 
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enforcing said selected policy on said at least one of said second set of 
network elements through said agent hosted thereby . 

27. (Currently Amended) A method according to claim 26, wherein collecting 
real-time op e ration operational information comprises collecting information on 
op e ration operational problems. 

28. (Currently Amended) A method according to claim 27, wherein collecting real- 
time op e ration operational information comprises collecting information on 
applications that do not operate or operate slowly. 

29. (Currently Amended) A method according to claim 27, wherein collecting 
real-time op e ration operational information comprises collecting information on 
system or application crashes. 

30. (Currently Amended) A method according to claim 26, wherein collecting 
real-time op e ration operational information comprises collecting information on 
software applications installed or running on the network elements. 

3 1 . (Currently Amended) A method according to claim 26, wherein collecting real- 
time op e ration operational information comprises collecting information on the 
communications between elements of the network. 

32. (Previously Presented) A method according to claim 26, wherein selecting the 
policy to be implemented comprises selecting a policy relating to a software to be 
installed on the second network element. 

33. (Previously Presented) A method according to claim 26, wherein selecting the 
policy to be implemented comprises selecting a policy relating to a software to be 
uninstalled from the second network element. 

34. (Previously Presented) A method according to claim 26, wherein selecting the 
policy to be implemented comprises selecting a policy relating to preventing 
installation of a software on the second network element. 
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35. (Previously Presented) A method according to claim 26, wherein selecting the 
policy to be implemented comprises selecting responsive to a determination that a 
group of network elements having a common problem have installed thereon a 
specific software application or combination of software applications. 

36. (Previously Presented) A method according to claim 26, wherein selecting 
the policy to be implemented comprises selecting a policy which allocates 
network resources. 

37. (Previously Presented) A method according to claim 26, wherein the policy 
is, elected implemented within less than 60 minutes from the collecting of the 
information. 

38. (Currently Amended) A method according to claim 26, wherein collecting 
the op e ration operational information is performed repeatedly. 

39. Cancel Claim 39 

40. Cancel Claim 40 

4 1 . (Currently Amended) A system according to claim 40 49, wherein the 
proc e ssor policy controller is adapted to find, for a group of network elements 
having a problem, a combination of attribute values that correlate with the 
problem to at least a predetermined degree. 

42. (Currently Amended) A system according to claim 40 49, wherein the 
proc e ssor policy controller is adapted to find, for a group of network elements 
having a problem, a combination of attribute values that appears only on the 
network elements having the problem. 

43. (Currently Amended) A system according to claim 40 49, wherein the 
proc es sor policy controller is adapted to collect for at least one network 
element, a plurality of snapshot records of the network element at different 
times. 



Copied from. H)50?022 on 03/00^0 1.0 



44. (Currently Amended) A system according to claim 40 49, wherein the 
proc e ssor policy controller is adapted to verify that each network element 
belongs to the network before collecting information from the network 
element. 

45 . (Currently Amended) A system according to claim 40 49, wherein the 
processor is adapted to find groups using a k-clustering or hierarchy 
clustering method. 

46. (Newly Presented) A method as defined in Claim 26 in which an 
aggregator is connected to said policy controller; said method in which: 

said receiving said real-time operational information relating to said 
attribute values is done at said aggregator and/or said policy controller. 

47. (Newly Presented) A system according to claim 49, wherein the policy 
controller is adapted to collect for at least one network element, a plurality 
of snapshot records of the network element at different times. 

48. (Newly Presented) A system according to claim 49, wherein the policy 
controller is adapted to verify that each network element belongs to the 
network before collecting information from the network element. 

49. (Newly Presented) A system of controlling a network, said network 
comprising: 

a first set of two or more network elements and a second set of one or more 
network elements; two or more of said first elements and one or more of said 
second elements having an end point element of said network which hosts an 
agent; and 

a policy controller in which ; 
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real-time operational information relating to attribute values at two or more 
agents is collected from said first set of two or more network elements which 
host agents; 

said real-time operational information relating to said attribute values is 
received at said policy controller from said two or more agents from said first set; 

a policy is selected, without human intervention, based on said real time 
information relating to said attribute values in said policy controller to be 
implemented by at least one of said second network elements hosting an agent, 
responsive to the collected real time information from said policy controller; and 
enforcing said selected policy on said at least one of said second set of 
network elements through said agent hosted thereby. 



50. (Newly Presented) A system as defined in Claim 49 in which also 
includes an aggregator which is connected to said policy controller; which 
receives said real-time operational information relating to said attribute 
values as well as or instead of said policy controller. 

5 1 . (Newly Presented) A method according to claim 26, wherein the policy 
controller is adapted to maintain for at least one network element, a plurality 
of snapshot records of said real-time operational information to have a record of 
changes in said operational information for use in selecting said policy. 

52. (Newly Presented) A method according to claim 46, wherein the policy 
controller and or aggregator is adapted to maintain for at least one network 
element, a plurality of snapshot records of said real-time operational 
information to have a record of changes in said operational information for use in 
selecting said policy. 
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